CVE-2022-20750: Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability
A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to improper input validation of an ingress TCP packet. An attacker could exploit this vulnerability by sending crafted TCP data to the affected application. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the checkpoint manager process restarting.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-20750?
CVE-2022-20750 is classified as a high-severity vulnerability due to its potential to enable denial of service through the checkpoint manager process.
How do I fix CVE-2022-20750?
To mitigate CVE-2022-20750, update the Cisco Redundancy Configuration Manager to version 21.24.0 or later and apply all recommended patches.
What affected software is associated with CVE-2022-20750?
CVE-2022-20750 affects Cisco Redundancy Configuration Manager running on Cisco StarOS Software versions prior to 21.24.0.
Can CVE-2022-20750 be exploited remotely?
Yes, CVE-2022-20750 can be exploited by unauthenticated remote attackers via malformed TCP data.
What impact does CVE-2022-20750 have on Cisco StarOS devices?
The impact of CVE-2022-20750 includes the ability to cause the checkpoint manager process to restart, leading to potential service disruptions.